Matt Amelio Email & Phone Number

Pittsburgh, Pa, Us

• Managing NIST Cybersecurity Framework (NIST CSF) / CIS Critical Security Controls (CIS CSC) control assessment engagements by facilitating with client stakeholders on planning control interview workshops, addressing follow-up inquiries, presenting the report deliverables, and addressing client feedback.• Managing Microsoft 365 (M365) security assessment engagements to assess security configurations across M365 services inclusive of Teams, Active Directory, SharePoint / OneDrive, Exchange and present recommendations that align to security best practices.• Executing and analyzing credential vulnerability scans on clients’ target systems / networks, based on the associated CVSS scores, CVE(s), and known exploitability with the detected vulnerabilities, to highlight prevalent vulnerabilities identified, the prioritization of remediating vulnerabilities, and the appropriate remediation approaches to mitigate the vulnerability findings.• Executing configuration reviews on network devices inclusive of firewalls, switches, and routers using Titania Nipper to analyze firewall rules and security configurations, and present recommendations that align to security best practices

- Assisted analyst investigation and ticket creation efforts. Provide daily monitoring and alerting of events that occur within the real time environment.- Communicating alerts to agencies regarding intrusions and compromises to their network infrastructure, applications, and operating systems. Consolidates and conducts comprehensive analysis of threat data obtained from classified, proprietary, and open-source resources to provide indication and warnings of impending attacks against classified and unclassified networks- Reported common and repeat problems (trend analysis) to management and propose process and technical improvements. - Stayed informed of current events in the security industry including latest exploits and threats as well as preventative measures, remediation, and restoration techniques.

New York, New York, United States

• Participated in CIS Critical Security Controls (CIS CSC) control assessment engagements.• Assisted in Microsoft 365 (M365) security assessments to assess security configurations across M365 services inclusive of Teams, Active Directory, SharePoint / OneDrive, Exchange and present recommendations that align to security best practices.• Reviewed third-party vendors documentation, identified risk and communicated it to clients.